Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts. 2024/12/22 04:53:16 ignoring optional flag "sandboxArg"="0" 2024/12/22 04:53:16 ignoring optional flag "type"="gce" 2024/12/22 04:53:16 parsed 1 programs [ 76.812492][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.749725][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.757773][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.766081][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.779814][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.787723][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.795269][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.304731][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.311905][ T3139] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.319774][ T3139] device bridge_slave_0 entered promiscuous mode [ 78.327061][ T3139] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.334288][ T3139] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.342268][ T3139] device bridge_slave_1 entered promiscuous mode [ 78.412643][ T3139] team0: Port device team_slave_0 added [ 78.419317][ T3139] team0: Port device team_slave_1 added [ 78.491523][ T3139] device hsr_slave_0 entered promiscuous mode [ 78.497970][ T3139] device hsr_slave_1 entered promiscuous mode [ 78.981099][ T3139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.989902][ T3139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.999785][ T3139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.008814][ T3139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.449054][ T3139] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.456312][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.464118][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.495129][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.503704][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.512175][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.519227][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.526677][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.535188][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.543426][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.550483][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.559404][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.571282][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.579794][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.591283][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.599162][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.608356][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.622802][ T3139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.633380][ T3139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.644961][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.653314][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.661639][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.669919][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.679737][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.104216][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.112833][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.128520][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.136776][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.147602][ T3139] device veth0_vlan entered promiscuous mode [ 80.157958][ T3139] device veth1_vlan entered promiscuous mode [ 80.165191][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.172941][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.180548][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.355416][ T3139] device veth0_macvtap entered promiscuous mode [ 80.363238][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.371305][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.379659][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.395599][ T3139] device veth1_macvtap entered promiscuous mode [ 80.411099][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.419056][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.427038][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.435533][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.450686][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.459906][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/12/22 04:53:23 executed programs: 0 [ 81.807734][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.814904][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.822981][ T3528] device bridge_slave_0 entered promiscuous mode [ 81.831064][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.838120][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.846168][ T3528] device bridge_slave_1 entered promiscuous mode [ 81.947034][ T3528] team0: Port device team_slave_0 added [ 81.954442][ T3528] team0: Port device team_slave_1 added [ 82.050709][ T3528] device hsr_slave_0 entered promiscuous mode [ 82.057793][ T3528] device hsr_slave_1 entered promiscuous mode [ 82.064574][ T3528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.072243][ T3528] Cannot create hsr debugfs directory [ 84.053392][ T3528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.061783][ T3528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.070093][ T3528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.078915][ T3528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.102424][ T79] device hsr_slave_0 left promiscuous mode [ 84.108771][ T79] device hsr_slave_1 left promiscuous mode [ 84.115526][ T79] device bridge_slave_1 left promiscuous mode [ 84.121723][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.129582][ T79] device bridge_slave_0 left promiscuous mode [ 84.135883][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.144862][ T79] device veth1_macvtap left promiscuous mode [ 84.150963][ T79] device veth0_macvtap left promiscuous mode [ 84.156998][ T79] device veth1_vlan left promiscuous mode [ 84.162821][ T79] device veth0_vlan left promiscuous mode [ 84.230296][ T79] team0 (unregistering): Port device team_slave_1 removed [ 84.240148][ T79] team0 (unregistering): Port device team_slave_0 removed [ 84.595038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.602813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.612745][ T3528] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.621684][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.630183][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.638570][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.645629][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.653602][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.662393][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.670894][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.679102][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.686159][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.698560][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.706999][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.715810][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.725382][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.733903][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.744476][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.752709][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.762292][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.770561][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.779857][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.094154][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.102744][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.122903][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.131165][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.139913][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.147744][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.155984][ T3528] device veth0_vlan entered promiscuous mode [ 85.164729][ T3528] device veth1_vlan entered promiscuous mode [ 85.320611][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.328563][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.339898][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.348327][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.358194][ T3528] device veth0_macvtap entered promiscuous mode [ 85.368753][ T3528] device veth1_macvtap entered promiscuous mode [ 85.381110][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.388956][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.396860][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.405212][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.415489][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.424167][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.557137][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.565069][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.575220][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.588901][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.596868][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.604621][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.670384][ C1] ================================================================== [ 85.678475][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x14f/0x180 [ 85.686027][ C1] Read of size 1 at addr ffff88812fb14800 by task ksoftirqd/1/18 [ 85.693761][ C1] [ 85.696080][ C1] CPU: 1 PID: 18 Comm: ksoftirqd/1 Not tainted 5.15.175-syzkaller #0 [ 85.704286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.714365][ C1] Call Trace: [ 85.717637][ C1] [ 85.720569][ C1] dump_stack_lvl+0x8e/0xdd [ 85.725074][ C1] print_address_description.constprop.0.cold+0x6c/0x309 [ 85.732107][ C1] ? __nft_trace_packet+0x14f/0x180 [ 85.737313][ C1] ? __nft_trace_packet+0x14f/0x180 [ 85.742520][ C1] kasan_report.cold+0x83/0xdf [ 85.747285][ C1] ? __nft_trace_packet+0x14f/0x180 [ 85.752492][ C1] __nft_trace_packet+0x14f/0x180 [ 85.757526][ C1] nft_do_chain+0xc25/0x10d0 [ 85.762131][ C1] ? __nft_trace_verdict.isra.0+0x50/0x50 [ 85.767862][ C1] ? __unwind_start+0x4f3/0x7d0 [ 85.772709][ C1] ? arch_stack_walk+0x7d/0xe0 [ 85.777567][ C1] ? kfree_skbmem+0xef/0x1b0 [ 85.782158][ C1] ? stack_trace_save+0x8c/0xc0 [ 85.787017][ C1] ? filter_irq_stacks+0x90/0x90 [ 85.791959][ C1] ? kasan_set_track+0x1c/0x30 [ 85.796740][ C1] ? skb_release_data+0x5ac/0x6c0 [ 85.801870][ C1] ? ipt_do_table+0xc5f/0x16b0 [ 85.806639][ C1] ? ipt_do_table+0xc5f/0x16b0 [ 85.811401][ C1] nft_do_chain_inet+0x149/0x310 [ 85.816338][ C1] ? nft_do_chain_arp+0xb0/0xb0 [ 85.821197][ C1] ? nf_nat_inet_fn+0x265/0x9f0 [ 85.826046][ C1] ? __do_replace+0x840/0x840 [ 85.830722][ C1] ? nf_nat_ipv4_local_in+0x183/0x520 [ 85.836114][ C1] nf_hook_slow+0xc5/0x1f0 [ 85.840532][ C1] ip_local_deliver+0x261/0x370 [ 85.845385][ C1] ? ip_local_deliver_finish+0x270/0x270 [ 85.851016][ C1] ? ip_rcv+0x11b/0x230 [ 85.855173][ C1] ? ip_protocol_deliver_rcu+0x6e0/0x6e0 [ 85.860803][ C1] ? lock_downgrade+0x4f0/0x4f0 [ 85.865652][ C1] ? ip_rcv_finish_core.constprop.0+0x624/0x1e20 [ 85.871975][ C1] ip_rcv_finish+0x1da/0x2b0 [ 85.876579][ C1] ip_rcv+0x209/0x230 [ 85.880564][ C1] ? ip_local_deliver+0x370/0x370 [ 85.885585][ C1] ? handle_softirqs+0x14f/0x4f0 [ 85.890522][ C1] ? run_ksoftirqd+0x1a/0x20 [ 85.895108][ C1] ? smpboot_thread_fn+0x35e/0x730 [ 85.900224][ C1] ? param_attr_show+0x170/0x220 [ 85.905263][ C1] ? ip_sublist_rcv+0x820/0x820 [ 85.910149][ C1] ? ip_local_deliver+0x370/0x370 [ 85.915180][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 85.921160][ C1] ? __netif_receive_skb_core+0x3390/0x3390 [ 85.927142][ C1] __netif_receive_skb+0x24/0x1b0 [ 85.932201][ C1] process_backlog+0x2ae/0x6b0 [ 85.937079][ C1] ? process_backlog+0x27e/0x6b0 [ 85.942034][ C1] ? lock_downgrade+0x4f0/0x4f0 [ 85.947055][ C1] __napi_poll+0xb3/0x570 [ 85.951384][ C1] net_rx_action+0x856/0xb90 [ 85.955976][ C1] ? __switch_to+0x5c2/0xe70 [ 85.960569][ C1] ? napi_threaded_poll+0x500/0x500 [ 85.965765][ C1] handle_softirqs+0x14f/0x4f0 [ 85.970526][ C1] ? handle_softirqs+0x4f0/0x4f0 [ 85.975481][ C1] run_ksoftirqd+0x1a/0x20 [ 85.979893][ C1] smpboot_thread_fn+0x35e/0x730 [ 85.984828][ C1] ? smpboot_register_percpu_thread+0x370/0x370 [ 85.991070][ C1] kthread+0x327/0x3e0 [ 85.995178][ C1] ? set_kthread_struct+0x130/0x130 [ 86.000388][ C1] ret_from_fork+0x1f/0x30 [ 86.004802][ C1] [ 86.007822][ C1] [ 86.010132][ C1] Allocated by task 18: [ 86.014284][ C1] kasan_save_stack+0x1b/0x40 [ 86.018981][ C1] __kasan_slab_alloc+0x61/0x80 [ 86.023831][ C1] kmem_cache_alloc_node+0x22b/0x340 [ 86.029116][ C1] __alloc_skb+0x20b/0x340 [ 86.033537][ C1] synproxy_send_client_synack+0x1b7/0xd20 [ 86.039364][ C1] nft_synproxy_do_eval+0xb2e/0xe90 [ 86.044576][ C1] nft_do_chain+0x28c/0x10d0 [ 86.049163][ C1] nft_do_chain_inet+0x149/0x310 [ 86.054103][ C1] nf_hook_slow+0xc5/0x1f0 [ 86.058514][ C1] ip_local_deliver+0x261/0x370 [ 86.063363][ C1] ip_rcv_finish+0x1da/0x2b0 [ 86.067946][ C1] ip_rcv+0x209/0x230 [ 86.071917][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 86.077806][ C1] __netif_receive_skb+0x24/0x1b0 [ 86.082826][ C1] process_backlog+0x2ae/0x6b0 [ 86.087763][ C1] __napi_poll+0xb3/0x570 [ 86.092089][ C1] net_rx_action+0x856/0xb90 [ 86.096681][ C1] handle_softirqs+0x14f/0x4f0 [ 86.101446][ C1] run_ksoftirqd+0x1a/0x20 [ 86.105865][ C1] smpboot_thread_fn+0x35e/0x730 [ 86.110806][ C1] kthread+0x327/0x3e0 [ 86.114880][ C1] ret_from_fork+0x1f/0x30 [ 86.119348][ C1] [ 86.121675][ C1] Freed by task 18: [ 86.125467][ C1] kasan_save_stack+0x1b/0x40 [ 86.130159][ C1] kasan_set_track+0x1c/0x30 [ 86.134758][ C1] kasan_set_free_info+0x20/0x30 [ 86.139707][ C1] __kasan_slab_free+0xe0/0x110 [ 86.144565][ C1] kmem_cache_free+0x7e/0x450 [ 86.149239][ C1] kfree_skbmem+0xef/0x1b0 [ 86.153656][ C1] consume_skb+0x11d/0x290 [ 86.158082][ C1] nft_synproxy_do_eval+0xb36/0xe90 [ 86.163290][ C1] nft_do_chain+0x28c/0x10d0 [ 86.167875][ C1] nft_do_chain_inet+0x149/0x310 [ 86.172810][ C1] nf_hook_slow+0xc5/0x1f0 [ 86.177236][ C1] ip_local_deliver+0x261/0x370 [ 86.182094][ C1] ip_rcv_finish+0x1da/0x2b0 [ 86.186696][ C1] ip_rcv+0x209/0x230 [ 86.190669][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 86.196596][ C1] __netif_receive_skb+0x24/0x1b0 [ 86.201657][ C1] process_backlog+0x2ae/0x6b0 [ 86.206431][ C1] __napi_poll+0xb3/0x570 [ 86.210781][ C1] net_rx_action+0x856/0xb90 [ 86.215464][ C1] handle_softirqs+0x14f/0x4f0 [ 86.220245][ C1] run_ksoftirqd+0x1a/0x20 [ 86.224688][ C1] smpboot_thread_fn+0x35e/0x730 [ 86.229622][ C1] kthread+0x327/0x3e0 [ 86.233694][ C1] ret_from_fork+0x1f/0x30 [ 86.238121][ C1] [ 86.240479][ C1] The buggy address belongs to the object at ffff88812fb14780 [ 86.240479][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 86.255058][ C1] The buggy address is located 128 bytes inside of [ 86.255058][ C1] 232-byte region [ffff88812fb14780, ffff88812fb14868) [ 86.268440][ C1] The buggy address belongs to the page: [ 86.274077][ C1] page:ffffea0004bec500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fb14 [ 86.284350][ C1] flags: 0x200000000000200(slab|node=0|zone=2) [ 86.290539][ C1] raw: 0200000000000200 0000000000000000 dead000000000122 ffff8881089e7000 [ 86.299142][ C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 86.307728][ C1] page dumped because: kasan: bad access detected [ 86.314137][ C1] page_owner tracks the page as allocated [ 86.319839][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 18, ts 85669653430, free_ts 85646339738 [ 86.337207][ C1] get_page_from_freelist+0x12ff/0x3170 [ 86.342765][ C1] __alloc_pages+0x1b2/0x420 [ 86.347381][ C1] alloc_pages+0x16f/0x3d0 [ 86.351817][ C1] allocate_slab+0x2eb/0x430 [ 86.356410][ C1] ___slab_alloc+0xb1c/0xf80 [ 86.360999][ C1] kmem_cache_alloc_node+0x2e3/0x340 [ 86.366298][ C1] __alloc_skb+0x20b/0x340 [ 86.370742][ C1] synproxy_send_client_synack+0x1b7/0xd20 [ 86.376549][ C1] nft_synproxy_do_eval+0xb2e/0xe90 [ 86.381787][ C1] nft_do_chain+0x28c/0x10d0 [ 86.386374][ C1] nft_do_chain_inet+0x149/0x310 [ 86.391313][ C1] nf_hook_slow+0xc5/0x1f0 [ 86.396105][ C1] ip_local_deliver+0x261/0x370 [ 86.400971][ C1] ip_rcv_finish+0x1da/0x2b0 [ 86.405555][ C1] ip_rcv+0x209/0x230 [ 86.409538][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 86.415522][ C1] page last free stack trace: [ 86.420209][ C1] free_pcp_prepare+0x34e/0x730 [ 86.425063][ C1] free_unref_page_list+0x16f/0xbb0 [ 86.430264][ C1] release_pages+0x4b9/0x19b0 [ 86.435064][ C1] tlb_finish_mmu+0x165/0x8c0 [ 86.439752][ C1] exit_mmap+0x1ea/0x6d0 [ 86.443990][ C1] __mmput+0xd6/0x440 [ 86.448002][ C1] mmput+0x40/0x50 [ 86.451723][ C1] do_exit+0x9e1/0x2690 [ 86.455873][ C1] do_group_exit+0x125/0x310 [ 86.460459][ C1] __x64_sys_exit_group+0x3a/0x50 [ 86.465484][ C1] do_syscall_64+0x33/0xb0 [ 86.469900][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.475803][ C1] [ 86.478141][ C1] Memory state around the buggy address: [ 86.483847][ C1] ffff88812fb14700: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 86.491915][ C1] ffff88812fb14780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.499987][ C1] >ffff88812fb14800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 86.508046][ C1] ^ [ 86.512100][ C1] ffff88812fb14880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 86.520159][ C1] ffff88812fb14900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.528206][ C1] ================================================================== [ 86.536278][ C1] Disabling lock debugging due to kernel taint [ 86.542557][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.550020][ C1] Kernel Offset: disabled [ 86.554350][ C1] Rebooting in 86400 seconds..